Secunia Logo
Netsikker nu! 2008
 
SUSE update for awstats
Secunia Advisory: SA20710
Release Date: 2006-06-20
Popularity: 5,663 views

Critical:
Highly critical
Impact: Security Bypass
System access
Where: From remote
Solution Status: Vendor Patch

OS:SUSE Linux 10
SuSE Linux 9.1
SUSE Linux 9.2
SUSE Linux 9.3

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2006-2237
CVE-2006-2644


Description:
SUSE has issued an update for awstats. This fixes a vulnerability and a security issue, which can be exploited by malicious people to bypass certain security restrictions or to compromise a vulnerable system.

For more information:
SA19969
SA20164

Solution:
Apply updated packages.

-- Platform Independent --

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/upda...rpm/noarch/awstats-6.6-0.1.noarch.rpm
2d8eb8d53dee2adaeab7474d39d6ae2c

SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/upda...rpm/noarch/awstats-6.6-0.1.noarch.rpm
e38bb2ae10bc598708b1e38b3e3c4bdf

SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/upda...rpm/noarch/awstats-6.6-0.1.noarch.rpm
d0e86bbc349ce339e76dbe13ed5c3e30

SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/i386/upda...rpm/noarch/awstats-6.6-0.1.noarch.rpm
385a3eca20f8dd779f64c71449700886
ftp://ftp.suse.com/pub/suse/x86_64/up...rpm/noarch/awstats-6.6-0.1.noarch.rpm
312e17aef1372843f14e676477d5e6c8

-- Sources --

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/awstats-6.6-0.1.src.rpm
4ab4c7a702ca7043fbd2e6e4fe56c8fb

SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/src/awstats-6.6-0.1.src.rpm
bdaccf1a0eff3551e5fd3ee99129f843

SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/src/awstats-6.6-0.1.src.rpm
0363176a39bafe164617da4ee85f05d7

SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/src/awstats-6.6-0.1.src.rpm
2d3b029476f5ff91f3fe483ae1bad9fe
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/src/awstats-6.6-0.1.src.rpm
7a27454e22fd62673af6c184c0bb6956

Original Advisory:
http://lists.suse.com/archive/suse-security-announce/2006-Jun/0007.html

Other References:
SA19969:
http://secunia.com/advisories/19969/

SA20164:
http://secunia.com/advisories/20164/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. phpBB BBcode "url" Script Insertion Vulnerability // 73 views
2. phpBB "url" bbcode Script Insertion Vulnerability // 73 views
3. VMware VirtualCenter Multiple Vulnerabilities // 49 views
4. VMware ESX Server Sun Java JDK / JRE Multiple Vulnerabilities // 49 views
5. Microsoft Windows Vista Page Fault Handling Denial of Service // 44 views
6. VMware ESX / ESXi "JMP" Privilege Escalation Vulnerability // 39 views
7. Serv-U File Renaming Directory Traversal and STOU Denial of Service // 33 views
8. AmpJuke "special" SQL Injection Vulnerability // 27 views
9. Website Directory "keyword" Cross-Site Scripting Vulnerability // 27 views
10. JMweb MP3 Script "src" File Inclusion Vulnerabilities // 27 views